Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
0be038e054e4ed9243d76879f6f69856_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0be038e054e4ed9243d76879f6f69856_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
0be038e054e4ed9243d76879f6f69856_JaffaCakes118
Size
241KB
MD5
0be038e054e4ed9243d76879f6f69856
SHA1
ebcab0cbcbb271d007944c23d7c221ba66646d99
SHA256
fa1173bb1b84531892abe85b52e7cbae2c91cda2a45fabd8f6ed6121dfd7090e
SHA512
e884215ba3ee54363b603dd0e3bf0247b41ac0ef0f53556ed2065435c08f5499c69865b07262a73e6e58a23c660d085a54b2e4386996419fff9d5454ffc45571
SSDEEP
6144:jkeENDvTSn2SV/GuhYdViC7X57+nMJuitnc:jNEND/k/GLPX57+nSuiJc
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ